WasitPay (“WasitPay“, “we”, “us”) is an escrow-checkout technology platform for online commerce in Morocco, operated by:
Bluenova Labs SARL
IMM 7, Rue Moulay Rachid, Appt N°10, 4ᵉ étage, Hassan, Rabat 10020, Morocco
Email: [email protected]
This policy explains what personal data we collect when you use wasitpay.ma, app.wasitpay.ma, and related services (the “Services”), why we collect it, who we share it with, and the rights you have under Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.
| Category | Examples | Source |
|---|---|---|
| Account data | Name, phone number, email address, account type (buyer or seller), password credentials (stored by our authentication provider in hashed form) | You |
| Identity verification (KYC) | National ID (CIN) details and verification outcome for personal accounts | You, via our regulated payment partner |
| Business verification (KYB) | Company legal status, commercial register extract, signatory ID, bank account proof (RIB) for seller accounts | You, via our regulated payment partner |
| Transaction data | Escrow transaction references, amounts, status (pay / ship / confirm / release), dispute records, delivery declarations | You and your counterparty |
| Communications | WhatsApp and email notifications we send you (including one-time passcodes), support messages | You / generated by us |
| Technical data | IP address, device and browser information, log data, cookies necessary for session security | Automatic |
We do not collect or store your card numbers or payment credentials. These are handled directly by our regulated payment partner and its providers.
We do not sell personal data, and we do not use your personal data for third-party advertising.
| Recipient | Purpose |
|---|---|
| Our regulated payment partner (licensed by Bank Al-Maghrib) | KYC and KYB verification, payment reference generation, funds custody, payouts, refunds, cash-in/cash-out at agent networks |
| Meta Platforms (WhatsApp Business Platform) and messaging providers | Delivery of OTP and transaction notifications to your WhatsApp number |
| Amazon Web Services (hosting, EU-Paris region) | Secure cloud infrastructure, encrypted storage, and email delivery |
| Shipping partners | Delivery status used to progress escrow transactions, where applicable |
| Your transaction counterparty | The limited details needed to complete the transaction (e.g., name, transaction status) |
| Public authorities | Where required by Moroccan law or a valid legal request |
Our infrastructure is hosted with Amazon Web Services in the European Union (Paris region), with data encrypted in transit and at rest. Messaging via the WhatsApp Business Platform involves processing by Meta Platforms in accordance with its own terms and privacy policies. Where personal data is transferred outside Morocco, we take steps designed to ensure an adequate level of protection consistent with Law No. 09-08.
Subject to the conditions of Law No. 09-08, you have the right to access your personal data, to request rectification of inaccurate data, to object to certain processing on legitimate grounds, and to request deletion of data that we are not legally required to keep. Personal data processing in Morocco is supervised by the national data protection authority (CNDP).
To exercise any of these rights, contact [email protected]. For deletion specifically, see our Data Deletion page. We may need to verify your identity before acting on a request, and we will respond within a reasonable period.
We apply technical and organizational measures appropriate to a financial-technology service, including encryption in transit and at rest, hashed credential and OTP storage, role-restricted access to production systems, and logging and monitoring. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will act in accordance with applicable law.
We use strictly necessary cookies for authentication, session integrity, and security. We do not use advertising cookies.
The Services are intended for adults with legal capacity to contract. We do not knowingly collect personal data from minors.
We may update this policy from time to time; the “Last updated” date above reflects the current version, and material changes will be notified through the Services. Questions: [email protected], or by post to Bluenova Labs SARL, IMM 7, Rue Moulay Rachid, Appt N°10, 4ᵉ étage, Hassan, Rabat 10020, Morocco.